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AMENDMENTS TO THE CLAIMS 

The text of all pending claims, (including withdrawn claims) is set forth below. Cancelled 
and not entered claims are indicated with claim number and status only. The claims as listed 
below show added text with underlining and deleted text with str i k e through . The status of each 
claim is indicated with one of (original), (currently amended), (cancelled), (withdrawn), (new), 
(previously presented), or (not entered). 

1 . (currently amended) A security information mediation apparatus connected 
between a first terminal at an information contributor and a second terminal at an information 
recipient, the security information mediation apparatus comprising: 

a first receiving unit which receives security information from the first terminal , the 
security information comprising information regarding a design error or bug in a computer 
program : 

a first registering unit which registers the security information in a first database; 

a first transfer unit which receives the security information from the first registering unit 
and transfers the security information registered by the first registering unit to the second 
terminal for the information recipient to judge usefulness of the security information; 

a second receiving unit which receives at least reply information including the usefulness 
of the security information corresponding to the security information from the second terminal; 

a second registering unit which registers at least the reply information in a second 
database; and 

a second transfer unit which receives at least the reply information from the second 
registering unit and transfers the reply information to the first terminal, wherein 

when the information recipient finds that the security information has usefulness, the 
second receiving unit receives payment information on an information presentation fee to be 
paid to the information contributor from the second terminal, the second registering unit registers 
the payment information together with the reply information, and the second transfer unit 
transfers the payment information together with the reply information to the first terminal. 

2. (Previously presented) The security information mediation apparatus according 
to claim 1 , wherein said first registering unit refers to the registered security information in the 
first database, and registers the security information from the first terminal in the first database 
only if the security information from the first terminal is new, and said first transfer unit transfers 
the security information from the first terminal to the second terminal only if the security 
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information from the first terminal is new. 

3. (previously presented) The security information mediation apparatus according to 
claim 1, further comprising: 

a classification information registering unit which registers classification information of 

the security information desired by the information recipient; and 

a classification unit which classifies the security information from the first terminal, 
wherein said first transfer unit transfers the security information to the second terminal 

only if the classification information and classification result of said classification unit coincide. 

4. (previously presented) The security information mediation apparatus according to 
claim 1, wherein the second receiving unit receives invalidity information showing invalidity of 
the security information from the second terminal, and said second transfer unit transfers the 
invalidity information to the first terminal, 

5. (previously presented) The security information mediation apparatus according to 
claim 1 , wherein the second receiving unit receives, from the second terminal, correction 
information as a measure for the security information of which usefulness is shown and said 
second transfer unit transfers the correction information to the first terminal. 

6. (previously presented) The security information mediation apparatus according to 
claim 1, further comprising a disclosing unit which discloses the security information registered 
by the first registering unit. 

7. (previously presented) The security information mediation apparatus according to 
claim 5, further comprising a disclosing unit which discloses the security information registered 
by the first registering unit and the correction information. 

8. (currently amended) A security information mediation method^ comprising: 
a f i rst r e c ei v i ng st e p of receiving security information from a first terminal at an 

information contributo r, the security information comprising information regarding a design error 
or bug in a computer program : 

a-first r e g i st e ring st e p of registering the security information in a first database; 

a f i rst transf e r st e p of receiving the security information registered at the first registering 
ste^and transferring the security information registered at the first registering ste^to a second 
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terminal at an information recipient for judging usefulness of the security information; 

a s e cond r e c ei ving st e p of receiving at least reply information including the usefulness of 
the security information corresponding to the security information from the second terminal; 



database; and 

a s e cond transf e r st e p of receiving at least the reply information and transferring the 
reply information to the first terminal, wherein 

when the information recipient finds that the security information has usefulness, the 
s e cond receiving of at least the reply information ste^ includes receiving payment information on 
an information presentation fee to be paid to the information contributor from the second 
terminal, the seeea^-registering of at least the reply informations tep includes registering the 
payment information together with the reply information, and the receiving at least the reply 
information and transferring socond transf e r st e p includes transferring the payment information 
together with the reply information to the first terminal. 

9. (currently amended) The security information mediation method according to 
claim 8, wherein the registering the security information f i rst r e g i st e r i ng st e p includes referring to 
the registered security information in the first database, and registering the security information 
from the first terminal only if the security information from the first terminal is new, and the 
receiving the security information registered at the first registering step and transferring fifst 



terminal only if the security information from the first terminal is new. 

10. (currently amended) The security information mediation method according to 
claim 8, further comprising: 

a c l assificat i on i nformation r e gister i ng st e p of registering classification information of the 

security information desired by the information recipient; and 

a c l assificat i on st e p of classifying the security information from the first terminal, 
wherein the receiving the security information registered at the first registering step and 

transferring first transf e r st e p includes transferring the security information to the second 

terminal only if the classification information and classification result at the 

classifying c l ass i ficat i on st e p coincide. 

11 . (currently amended) The security information mediation method according to 
claim 8, wherein the receiving at least reply information socond rec ei ving st e p includes receiving 




registering at least the reply information in a second 



includes transferring the security information from the first terminal to the second 
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invalidity information showing invalidity of the security information from the second terminal, and 
the receiving at least the reply information and transferring oocond transf e r step transfers the 
invalidity information to the first terminal. 

12. (currently amended) The security information mediation method according to 
claim 8, wherein the receiving at least reply information Gocond rooo i ving st e p includes receiving 
from the second terminal, correction information as a measure for the security information of 
which usefulness is shown and the receiving at least the reply information and 
transferring s e cond transf e r st e p includes transferring the correction information to the first 
terminal. 

13. (currently amended) The security information mediation method according to 
claim 8, further comprising a d i sc l os i ng st e p of disclosing the security information registered at 
the first registering step. 

14. (currently amended) The security information mediation method according to 
claim 12, further comprising a disc l os i ng st e p of disclosing the security information registered at 
the first registering step and the correction information. 

1 5. (previously presented) A computer readable medium for storing instructions, 
which when executed by a computer, causes the computer to perform: 

a-first rec ei v i ng st e p of receiving security information from a first terminal at an 
information contributo r, the security information comprising information regarding a design error 
or bug in a computer program : 



a f i rst transf e r st e p of receiving the security information registered at the first registering 
step-and transferring the security information registered at the first registering step-to a second 
terminal at an information recipient forjudging usefulness of the security information; 

a second r e c ei v i ng st e p of receiving at least reply information including the usefulness of 
the security information corresponding to the security information from the second terminal; 



database; and 

a s e cond transf e r st e p of receiving at least the reply information registered at the second 
registering step and transferring the reply information registered at the second registering step to 
the first terminal, wherein 




-registering the security information in a first database; 




•registering at least the reply information in a second 
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when the information recipient finds that the security information has usefulness, the 
receiving at least reply information s e cond r e c ei v i ng st e p includes receiving payment information 
on an information presentation fee to be paid to the information contributor from the second 
terminal, the registering at least the reply information sooond regist e r i ng st e p includes 
registering the payment information together with the reply information, and the receiving at least 
the reply information s e cond transf e r st e p includes transferring the payment information together 
with the reply information to the first terminal. 

16. (new) A method of collecting information over a network, comprising: 
determining that information received from a verified user regarding a design error or bug 

in a computer program is valuable; and 

rewarding the user for submitting the information. 

17. (new) A method of collecting information over a network, comprising: 
determining that information received from a verified user regarding a security flaw in a 

product is valuable; and 

rewarding the user for submitting the information. 
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